Bitcoin Forum
April 14, 2021, 07:45:22 AM *
News: Latest Bitcoin Core release: 0.21.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: [1] 2 3 4 5 6 7 8 9 10 »
1  Bitcoin / Bitcoin Technical Support / Re: Salvagewallet in latest Bitcoin core on: April 13, 2021, 07:51:30 PM
The -salvagewallet command line option was moved into the bitcoin-wallet utility as of Bitcoin Core 0.21, and its name has changed to salvage.

Code:
bitcoin-wallet -wallet=<wallet name> salvage
Thanks, how do I run that on my wallet files? My wallet files are In D:\Bitcoin, and Daemon is in the same. I have 3 wallet files with different names. Does the bitcoin-wallet offer any more tools?
2  Bitcoin / Bitcoin Technical Support / Salvagewallet in latest Bitcoin core on: April 13, 2021, 07:24:09 PM
How do you run salvagewallet in the latest version. Thanks.
3  Bitcoin / Development & Technical Discussion / Re: Pywallet 2.2: manage your wallet [Update required] on: April 12, 2021, 07:48:11 PM
JackJack mentions that pywallet didn't recover compressed keys. Could that be why i'm not able to recover anything from this wallet? Does the old pywallet have trouble recovering and dumping newer wallets. Does a wallet from 2015 fall into this category? Cheers.
Not sure about "recovering"... but it certainly dumps "compressed" keys... the thing you have to remember, is that the private key itself is not "compressed" or "uncompressed"...

It is the public key (and the subsequent hash160 "address") that is "compressed" or "uncompressed". The private key is always a 256bit number.

I think the "new" fields were added when HD wallet support was introduced which was in v0.13... which was released in August 2016... so a wallet created in 2015 should be the old "non HD" wallet type. However, if it was subsequently opened in a newer version of Bitcoin Core, the wallet file was likely "upgraded" (not to HD, but to the new format) which may have added in the fields that cause issues with PyWallet.

This is why I recommend making copies of the original 2015 wallet.dat file and working on the copies.

Again, have you simply tried opening one of the copies of the wallet.dat in Bitcoin Core and using either dumpwallet or dumpprivekey from inside Bitcoin Core? It would be much much easier than trying to deal with PyWallet and it won't matter if the wallet file is old version or new version.
The wallet seemed to load okay into the latest Bitcoin Core but I don't see the address. Here is a wallet dump of it, i'm not sure if I loaded the wallet into core correctly as it seems more complicated than older versions. Why are all the addresses in the newer format? I have obviously deleted most of the private key info.
https://imgur.com/a/vQ5cpCn
4  Bitcoin / Development & Technical Discussion / Re: Pywallet 2.2: manage your wallet [Update required] on: April 11, 2021, 09:49:19 PM
The comment he made about compressed key recovery is in the first comment of this page.
5  Bitcoin / Development & Technical Discussion / Re: Pywallet 2.2: manage your wallet [Update required] on: April 11, 2021, 04:49:06 PM
You can try those code alterations... or use my version here: https://github.com/HardCorePawn/pywallet

It essentially has the mods as shown by the commits here: https://github.com/jackjack-jj/pywallet/compare/master...HardCorePawn:master


But before messing around with PyWallet... have you just tried installing Bitcoin Core and opening a copy of the wallet.dat from 2015 that has the address you're after in it? Huh

It would be much much simpler to use dumpprivkey from within Bitcoin Core (it doesn't even need to be synced or connected to the network) and get the private key that way than trying to use PyWallet.

And of course, regardless of whether you are using Bitcoin Core or Pywallet, you'll still need to know what the wallet passphrase is to be able to access the private key.
JackJack mentions that pywallet didn't recover compressed keys. Could that be why i'm not able to recover anything from this wallet? Does the old pywallet have trouble recovering and dumping newer wallets. Does a wallet from 2015 fall into this category? Cheers.
6  Bitcoin / Development & Technical Discussion / Re: Pywallet 2.2: manage your wallet [Update required] on: April 10, 2021, 11:19:30 PM
Pywallet is very old and the wallet.dat file format has changed since Pywallet was last updated (2014).

It looks like the script does not handle some of the new data fields that are now included in the wallet.dat file. It should theoretically be possible to modify the script to either handle or ignore the unknown fields.

If you just want to dump the file and don't care about making a "valid" wallet.dat... you can edit the pywallet.py file:

Change Line #2111 from:
Code:
d.update(parse_BlockLocator(vds))
to:
Code:
#d.update(parse_BlockLocator(vds))


Then on Line #2502, change:
Code:
json_db['bestblock'] = d['hashes'][0][::-1].encode('hex_codec')
to:
Code:
print("ignored") #json_db['bestblock'] = d['hashes'][0][::-1].encode('hex_codec')


The script will still spit out a whole heap of garbage like this:
Quote
Wallet data not recognized: {'__type__': 'keymeta', '__value__': "\n\x00\x00\x00\xa9\xd2\x85Z\x00\x00\x00\x00\x0bm/0'/0'/28'\x0c[\xfd\xe5\xabu\xfe\xf6\x13\xfb\x98p$F\xa6\xc2\xf1\\\xba\x04", '__key__': '\x07keymeta!\x03\xe3k\x94[F\xb4HO5f<b\x84\x88\x9fx\xb5Y~\xba\x01&e}\xcd\xbft\x90k\xdf\xbf\x07'}

but you should get to see all the key stuff printed out:
Quote
   "keys": [
        {
            "addr": "1PLXWsEWa3wrZTGo52FDjGiTP85LBbKRpg",
            "compressed": true,
            "hexsec": ".... removed ....",
            "private": "308ffffffffffffffffffffffffffffffffffffffffffffffffffffff73311b4fb36b7bffffffff ffffffffffffffffffffffffffffffffffffffffffffff48ce3d0101022100fffffffffffffffff ffffffffffffffffffffffffffffffffffffffefffffc2f30060fffffffffffffffffffffffffff fffffffffffffffffffffffffff6f81798022100fffffffffffffffffffffffffffffffebaaedce ffffffffffffffffffffffffffffffffffffffffffffffffffffff002067ddfffffffffffffffff fffffffffffffffffffffffffffffffffffff1298b98e",
            "pubkey": "02067dd94367c87da0d59c5f3b1c400239f846073b2b83b87bc15bc3201298b98e",
            "reserve": 1,
            "sec": ".... removed ....",
            "secret": ".... removed ...."
        }

The important one will be "sec"... that will be the WIF private key and should start with "5", "L" or "K"
I have reason to believe that a wallet.dat i found that is from from 2015 could contain the private key i am after. It seems that my brother in law has got his information mixed up. I opened this particular file up with a file viewer 4 and i could read the address i'm after within it. Do you think i could have any luck with either your code alterations or the newer version of pywallet. Cheers. I didn't have any luck when i ran pywallet on the whole hard drive which contains this wallet file.
7  Bitcoin / Bitcoin Technical Support / Re: pywallet install help on: April 07, 2021, 09:02:18 PM
are you using the latest version of PyWallet? (that has been updated recently by jackjack) or are you using the old version? Huh

Also, where is your wallet.dat actually located? The --datadir value you are using is where Python should be installed to... not where your wallet.dat is likely to be located unless you manually copied it there.
I'm probably not making myself clear. I have scanned the whole Hard drive with pywallet on multiple occasions, when the hard drive has been mounted in a separate enclosure and connected via usb. The scans have been successful in recovering wallets but i find that the results have sometimes been inconsistent. The last time I tried a scan i used every passphrase upper and lowercase, but that didn't yield as many results as an earlier one that included less passphrase variations(i do know the correct passphrases that my brother in law used). I have done quite a few scans this way and have managed to dump the recovered wallets. Some of the wallet.dats i recovered were obtained by using recuva(a file retrieval software). I put those files on to a usb stick and ran those through pywallet with limited success. I think they are corrupted but they are from the correct time(2011-2013). The version of pywallet used is the original one using python 2.7. I don't know if the updated one is any better, but i did see JackJack saying that some things in the original "have always been broken" so maybe i should try it? I just wondered whether the pywallet scan of a hard drive from another laptop is fully accessed by the scan. Thanks for your time.
8  Bitcoin / Bitcoin Technical Support / Re: Base 64 characters? Bitcoin docx file on: April 05, 2021, 10:06:30 PM
https://imgur.com/s23eGUj This is the majority of the first block of text.
It certainly looks like Base64 with the +'s and /'s... but it's possible that it is encrypted text/data that has been Base64 encoded... And, obviously, without knowing the details of the encryption method used, if you Base64 decode it, you're just going to get the encrypted data which will look like gibberish Undecided
Someone mentioned that it could be a pgp file?
9  Bitcoin / Bitcoin Technical Support / Re: Base 64 characters? Bitcoin docx file on: April 05, 2021, 09:18:06 PM
As part of an attempt to retrieve a Bitcoin wallet/private key from an old hard drive I have found a docx file labeled Bitcoin. It consists of 3 blocks of characters A-Z, a-z, numbers 1-9 and+/. Each block is about 70 characters long and about 50 lines deep.
Do the 3 blocks all start with the characters "U2F"? Huh

If not, do the 3 blocks all start with the same couple of characters... and if so, what are those characters? Huh

https://imgur.com/s23eGUj This is the majority of the first block of text. There are another 4 of about the same size plus a smaller block. I have to open it in Word with the get text from any file facility as it won't open otherwise. The file is labelled bitcoin_ addresses.docx. There is another one just called bitcoin addresses and when i open that it just has the address i am interested in, in plain text. So i'm a bit stumped on what, if anything i can get from these files.
10  Bitcoin / Bitcoin Technical Support / Re: pywallet install help on: April 05, 2021, 08:56:44 PM
Thanks for the reply. It was from a pywallet recovered wallet via some wallet.dat files that I moved to a thumb drive from the hard drive using recovery software. I have got some inconsistent results with pywallet when searching the whole hard drive. In past searches it has found up to 300 keys, but the last couple of attempts using even more passphrases has produced only 103 at the most. Something else i wondered about was the possible unencrypted keys it says it has found. Do you know whether pywallet will search a whole hard drive that you have mounted in an enclosure and connected via usb, including any partitions it has? Thanks again.
11  Bitcoin / Bitcoin Technical Support / Re: pywallet install help on: April 05, 2021, 07:49:54 PM
http://https://imgur.com/0Iefhxy This is what i get when dumping one of the recovered wallets. Some of the numbers and characters of the key have been altered.
12  Bitcoin / Bitcoin Technical Support / Re: Base 64 characters? Bitcoin docx file on: April 03, 2021, 01:44:40 PM
Could it be a Blockchain wallet in json format?
13  Bitcoin / Bitcoin Technical Support / Re: Base 64 characters? Bitcoin docx file on: April 02, 2021, 01:40:39 PM
I have found a docx file labeled Bitcoin.

Something hit me after reading this again - a human had to have pasted the stuff in this file. .docx file format is actually a ZIP archive with various other files inside  (open it inside 7-zip or any archiving program if you don't believe me), so there is no way this could have been computer generated by a recovery tool.

Do you remember if you were the one who created this file, or if you have any idea where you pasted the data from? It doesn't look like something you'll find in Bitcoin-Qt.

What is the date of the file's creation? This'll help narrow down the potential sources to software that existed at the time.
Thanks again for your replies. It was created mid June 2013.
14  Bitcoin / Bitcoin Technical Support / Re: pywallet install help on: April 02, 2021, 08:03:38 AM
sorry for the delay in getting back to you... I had an unexpected hospital adventure Tongue

the command for Pywallet to scan a USB stick in G: would be:
Code:
python pywallet.py --recover --recov_device=G: --recov_size=XXGio

"XXGio" should be set to the size of G: thumbstick in gigabytes... ie. 8Gio

Note that it won't really "dump" the output to the screen only (ie. you're not going to see any addresses or private keys)... the --recover option scans the selected device looking for "wallet" data and attempts to create a "recovered wallet.dat" file from what it can find... you can then try and use Pywallet's --dumpwallet feature to try and dump the contents of the "recovered wallet.dat" to the screen.

But it's not possible to simply scan a device and directly output addresses/keys using PyWallet
That's okay. I will just do the recoveries and then dump the wallets as per your excellent help. Hope everything Is okay with you now, after your adventure. Now, do you know anything about weird word docx labelled Bitcoin addresses? lol. Take care.
15  Bitcoin / Bitcoin Technical Support / Re: Base 64 characters? Bitcoin docx file on: March 29, 2021, 08:18:11 PM
You can safely test if you have Base64 input and what it encodes by running the following Python code in your local interpreter.

Code:
import base64
string = input("Input base64 here: ")
string_decode = base64.decodestring(string)
print("Decoded string:")
print(string_decode)

I would avoid using online base64 decoders if you think you might have a private key, since you have no idea if the data is logged server-side.

I assume you already have python installed based on your previous support questions about pywallet.
I might have to send the file to someone trusted to have a look at as I'm not sure what I'm doing. I have got python 2.7 installed but it is a lot of text to enter in a command line. Thanks for your time.
16  Bitcoin / Bitcoin Technical Support / Re: Decrypt private key by passphrase alone, possible? on: March 29, 2021, 07:44:17 PM
I have a wallet.dat file that I recovered from a hard drive using recovery software. I ran pywallet through it, and all it showed was one encrypted private key and a salt and I knew the correct passphrase, which I used . I have also used pywallet on the full 400G drive, and all those recovered files found by that method have included address, public key, master key etc. The lone encrypted private key is different to any of the ones found by doing the full drive search.
why make it so hard?, you have a wallet.dat file, if you have that password, you can easily get the private key by dumpwallet command on the console. You also don't need to sync network or download the full blockchain for that.

The lone encrypted private key is different to any of the ones found by doing the full drive search.
I guess it's not bitcoin's private key.
I have already used dumpwallet with pywallet on the recovered wallets I found with a full drive scan. This is a wallet.dat I found in a lost partition by using recovery software. The file won't dump like the other wallets, as I think it is corrupted, and shows as 96kb before using pywallets dumpwallet command. The resulting dumped wallet is only 32kb and says "wallet is encrypted passphrase is correct" but unlike the others it shows only one encrypted private key and nothing else apart from salt and a number. The one encrypted key is a different alphanumeric number to any of the other encrypted private keys I have recovered, so obviously it could be the one I'm after. None of the wallets are usable in the normal way in bitcoin core no matter what command you use as they are corrupted. I have used the passphrase on the other recovered wallet.dats and it shows all the addresses, private keys, mkey etc ie it decrypts the wallets.
17  Bitcoin / Bitcoin Technical Support / Re: Base 64 characters? Bitcoin docx file on: March 29, 2021, 06:42:08 AM
Take a look at this:
https://blog.cryptohack.org/twitter-secrets
Maybe you have PEM
Interesting, thanks for that. Wish I had the knowledge to apply it.
If you indeed have a PGP key then it has nothing to do with bitcoin, specially if it is very long that would indicate it is possibly an RSA key then it definitely has nothing to do with bitcoin since we don't use RSA anywhere in bitcoin.
I also have never heard of any wallet that has ever used the DER encoding from ASN.1 standard to encode its private keys which is what that link is describing.
Fair enough, but the document is labelled Bitcoin addresses, as is another one which just shows the address in plain text that i'm interested in.
18  Bitcoin / Bitcoin Technical Support / Re: Base 64 characters? Bitcoin docx file on: March 28, 2021, 09:20:17 PM
Take a look at this:
https://blog.cryptohack.org/twitter-secrets
Maybe you have PEM
Interesting, thanks for that. Wish I had the knowledge to apply it.
19  Bitcoin / Bitcoin Technical Support / Re: Decrypt private key by passphrase alone, possible? on: March 28, 2021, 08:29:26 PM
I have an encrypted private key and I know the passphrase, plus I have a salt. Is It possible to get the private key? It is from an old Bitcoin core wallet. Thanks for any help.

I do not understand. What do you have? Wallet file? Or private key exported?
Usually when you export from Bitcoin Core (dumpprivkey) it exports key to WIF format, which is not encrypted. (starting with 5.... 51 characters or starting with K or L... 52 characters).

I have a wallet.dat file that I recovered from a hard drive using recovery software. I ran pywallet through it, and all it showed was one encrypted private key and a salt and I knew the correct passphrase, which I used . I have also used pywallet on the full 400G drive, and all those recovered files found by that method have included address, public key, master key etc. The lone encrypted private key is different to any of the ones found by doing the full drive search.
20  Bitcoin / Bitcoin Technical Support / Decrypt private key by passphrase alone, possible? on: March 28, 2021, 06:51:25 PM
I have an encrypted private key and I know the passphrase, plus I have a salt. Is It possible to get the private key? It is from an old Bitcoin core wallet. Thanks for any help.
Pages: [1] 2 3 4 5 6 7 8 9 10 »
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!